migrate-from-changesets
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONDYNAMIC_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill involves processing existing
.changeset/*.mdfiles to convert them to Tegami's format. This represents an untrusted data ingestion point where malicious instructions could theoretically be embedded. - Ingestion points:
.changeset/*.mdfiles (SKILL.md, Step 4). - Boundary markers: None explicitly defined in the conversion instructions.
- Capability inventory: File system writes (conversion), CI workflow execution (
pnpm tegami ci), and package installation (pnpm add). - Sanitization: None specified for the conversion of markdown content.
- [COMMAND_EXECUTION]: The skill provides instructions for the agent to execute survey, installation, and cleanup commands (
cat,grep,ls,pnpm add,pnpm remove,git rm). These commands are standard for a repository migration task and operate on local repository data. - [DYNAMIC_EXECUTION]: Tegami is configured via a Node.js/TypeScript script (
scripts/tegami.mts). This script imports local dependencies and is executed at runtime to define the release graph and plugin behavior. This is the intended architecture of the tool and uses local configuration files.
Audit Metadata